Biometrics in PIV Cards
This is Part 3 of a series discussing the public comments on Draft NIST SP 800-157, Guidelines for Derived Personal Identity Verification (PIV) Credentials and the final version of the publication....
View ArticleBiometrics and Derived Credentials
This is Part 4 of a series discussing the public comments on Draft NIST SP 800-157, Guidelines for Derived Personal Identity Verification (PIV) Credentials and the final version of the publication....
View ArticlePomcor Granted Patent on Multifactor Cryptographic Authentication
Pomcor has recently been granted US Patent 9,887,989 on a multifactor cryptographic authentication technique that uses a cryptographic key pair in conjunction with a password and/or a biometric key...
View ArticleFrictionless Secure Web Payments without Giving up on Cardholder Authentication
The 3-D Secure protocol version 1.0, marketed under different names by different payment networks (Verified by Visa, MasterCard SecureCode, American Express SafeKey, etc.) aims at reducing online...
View ArticleOnline Cardholder Authentication without Accessing the Card Issuer’s Site
One of the saddest failings of Internet technology is the lack of security for online credit card transactions. In in-store transactions, the cardholder authenticates by presenting the card, and card...
View ArticleA New Tool Against the Surge of Application Fraud
This blog post has been coauthored with Karen Lewison In recent posts we have been concerned with online credit card fraud and how to fight it using cardholder authentication. In this post we are...
View ArticlePomcor Granted Patent on Rich Credentials
Pomcor has been granted US Patent 10,567,377, Multifactor Privacy-Enhanced Remote Identification Using a Rich Credential. Karen Lewison is the lead inventor and I am a coinventor. Pomcor has so far...
View ArticleIdentity Verification: A Coronavirus Challenge to the Financial World
Updated April 1st, 2020 This blog post has been coauthored with Karen Lewison The coronavirus pandemic is causing unprecedented disruption throughout the business world. Businesses that are not able to...
View ArticleIdentity in a Zero Trust Architecture
In the previous post I said I was happy that the new CFO of Pomcor, Ken Cone, has experience with government contracting, as his experience may help us apply for and manage government funding for our...
View ArticleA Demonstration of Two-Factor Cryptographic Authentication with a Familiar...
I have just published a GitHub repository demonstrating a method of two-factor cryptographic authentication with a fusion credential, which provides the same user experience as traditional...
View Article
